Docs Packages
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. managedidentities
  5. managedidentities/v1alpha1
  6. Domain

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.managedidentities/v1alpha1.Domain

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

    Creates a Microsoft AD Domain in a given project. Operation Auto-naming is currently not supported for this resource.

    Create Domain Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Domain(name: string, args: DomainArgs, opts?: CustomResourceOptions);
    @overload
def Domain(resource_name: str,
           args: DomainArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def Domain(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           locations: Optional[Sequence[str]] = None,
           reserved_ip_range: Optional[str] = None,
           audit_logs_enabled: Optional[bool] = None,
           authorized_networks: Optional[Sequence[str]] = None,
           domain_name: Optional[str] = None,
           labels: Optional[Mapping[str, str]] = None,
           managed_identities_admin_name: Optional[str] = None,
           project: Optional[str] = None)
    func NewDomain(ctx *Context, name string, args DomainArgs, opts ...ResourceOption) (*Domain, error)
    public Domain(string name, DomainArgs args, CustomResourceOptions? opts = null)
    public Domain(String name, DomainArgs args)
public Domain(String name, DomainArgs args, CustomResourceOptions options)

    type: google-native:managedidentities/v1alpha1:Domain
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args DomainArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DomainArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DomainArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DomainArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DomainArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var exampledomainResourceResourceFromManagedidentitiesv1alpha1 = new GoogleNative.Managedidentities.V1Alpha1.Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1", new()
{
    Locations = new[]
    {
        "string",
    },
    ReservedIpRange = "string",
    AuditLogsEnabled = false,
    AuthorizedNetworks = new[]
    {
        "string",
    },
    DomainName = "string",
    Labels = 
    {
        { "string", "string" },
    },
    ManagedIdentitiesAdminName = "string",
    Project = "string",
});

    example, err := managedidentitiesv1alpha1.NewDomain(ctx, "exampledomainResourceResourceFromManagedidentitiesv1alpha1", &managedidentitiesv1alpha1.DomainArgs{
Locations: pulumi.StringArray{
pulumi.String("string"),
},
ReservedIpRange: pulumi.String("string"),
AuditLogsEnabled: pulumi.Bool(false),
AuthorizedNetworks: pulumi.StringArray{
pulumi.String("string"),
},
DomainName: pulumi.String("string"),
Labels: pulumi.StringMap{
"string": pulumi.String("string"),
},
ManagedIdentitiesAdminName: pulumi.String("string"),
Project: pulumi.String("string"),
})

    var exampledomainResourceResourceFromManagedidentitiesv1alpha1 = new Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1", DomainArgs.builder()
    .locations("string")
    .reservedIpRange("string")
    .auditLogsEnabled(false)
    .authorizedNetworks("string")
    .domainName("string")
    .labels(Map.of("string", "string"))
    .managedIdentitiesAdminName("string")
    .project("string")
    .build());

    exampledomain_resource_resource_from_managedidentitiesv1alpha1 = google_native.managedidentities.v1alpha1.Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1",
    locations=["string"],
    reserved_ip_range="string",
    audit_logs_enabled=False,
    authorized_networks=["string"],
    domain_name="string",
    labels={
        "string": "string",
    },
    managed_identities_admin_name="string",
    project="string")

    const exampledomainResourceResourceFromManagedidentitiesv1alpha1 = new google_native.managedidentities.v1alpha1.Domain("exampledomainResourceResourceFromManagedidentitiesv1alpha1", {
    locations: ["string"],
    reservedIpRange: "string",
    auditLogsEnabled: false,
    authorizedNetworks: ["string"],
    domainName: "string",
    labels: {
        string: "string",
    },
    managedIdentitiesAdminName: "string",
    project: "string",
});

    type: google-native:managedidentities/v1alpha1:Domain
properties:
    auditLogsEnabled: false
    authorizedNetworks:
        - string
    domainName: string
    labels:
        string: string
    locations:
        - string
    managedIdentitiesAdminName: string
    project: string
    reservedIpRange: string

    Domain Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Domain resource accepts the following input properties:

    Locations List<string>
    Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
    ReservedIpRange string
    The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
    AuditLogsEnabled bool
    Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
    AuthorizedNetworks List<string>
    Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
    DomainName string
    The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
    Labels Dictionary<string, string>
    Optional. Resource labels to represent user provided metadata
    ManagedIdentitiesAdminName string
    Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.
    Project string
    Locations []string
    Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
    ReservedIpRange string
    The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
    AuditLogsEnabled bool
    Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
    AuthorizedNetworks []string
    Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
    DomainName string
    The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
    Labels map[string]string
    Optional. Resource labels to represent user provided metadata
    ManagedIdentitiesAdminName string
    Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.
    Project string
    locations List<String>
    Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
    reservedIpRange String
    The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
    auditLogsEnabled Boolean
    Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
    authorizedNetworks List<String>
    Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
    domainName String
    The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
    labels Map<String,String>
    Optional. Resource labels to represent user provided metadata
    managedIdentitiesAdminName String
    Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.
    project String
    locations string[]
    Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
    reservedIpRange string
    The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
    auditLogsEnabled boolean
    Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
    authorizedNetworks string[]
    Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
    domainName string
    The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
    labels {[key: string]: string}
    Optional. Resource labels to represent user provided metadata
    managedIdentitiesAdminName string
    Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.
    project string
    locations Sequence[str]
    Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
    reserved_ip_range str
    The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
    audit_logs_enabled bool
    Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
    authorized_networks Sequence[str]
    Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
    domain_name str
    The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
    labels Mapping[str, str]
    Optional. Resource labels to represent user provided metadata
    managed_identities_admin_name str
    Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.
    project str
    locations List<String>
    Locations where domain needs to be provisioned. regions e.g. us-west1 or us-east4 Service supports up to 4 locations at once. Each location will use a /26 block.
    reservedIpRange String
    The CIDR range of internal addresses that are reserved for this domain. Reserved networks must be /24 or larger. Ranges must be unique and non-overlapping with existing subnets in [Domain].[authorized_networks].
    auditLogsEnabled Boolean
    Optional. Configuration for audit logs. True if audit logs are enabled, else false. Default is audit logs disabled.
    authorizedNetworks List<String>
    Optional. The full names of the Google Compute Engine networks to which the instance is connected. Network can be added using UpdateDomain later. Domain is only available on network part of authorized_networks. Caller needs to make sure that CIDR subnets do not overlap between networks, else domain creation will fail.
    domainName String
    The fully qualified domain name. e.g. mydomain.myorganization.com, with the following restrictions: * Must contain only lowercase letters, numbers, periods and hyphens. * Must start with a letter. * Must contain between 2-64 characters. * Must end with a number or a letter. * Must not start with period. * Must be unique within the project. * First segment length (mydomain form example above) shouldn't exceed 15 chars. * The last segment cannot be fully numeric.
    labels Map<String>
    Optional. Resource labels to represent user provided metadata
    managedIdentitiesAdminName String
    Optional. Name of customer-visible admin used to perform Active Directory operations. If not specified setupadmin would be used.
    project String

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Domain resource produces the following output properties:

    CreateTime string
    The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
    Fqdn string
    Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
    State string
    The current state of this domain.
    StatusMessage string
    Additional information about the current status of this domain, if available.
    Trusts List<Pulumi.GoogleNative.Managedidentities.V1Alpha1.Outputs.TrustResponse>
    The current trusts associated with the domain.
    UpdateTime string
    Last update time. Synthetic field is populated automatically by CCFE.
    CreateTime string
    The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
    Fqdn string
    Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
    State string
    The current state of this domain.
    StatusMessage string
    Additional information about the current status of this domain, if available.
    Trusts []TrustResponse
    The current trusts associated with the domain.
    UpdateTime string
    Last update time. Synthetic field is populated automatically by CCFE.
    createTime String
    The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
    fqdn String
    Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
    state String
    The current state of this domain.
    statusMessage String
    Additional information about the current status of this domain, if available.
    trusts List<TrustResponse>
    The current trusts associated with the domain.
    updateTime String
    Last update time. Synthetic field is populated automatically by CCFE.
    createTime string
    The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
    fqdn string
    Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
    state string
    The current state of this domain.
    statusMessage string
    Additional information about the current status of this domain, if available.
    trusts TrustResponse[]
    The current trusts associated with the domain.
    updateTime string
    Last update time. Synthetic field is populated automatically by CCFE.
    create_time str
    The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
    fqdn str
    Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
    state str
    The current state of this domain.
    status_message str
    Additional information about the current status of this domain, if available.
    trusts Sequence[TrustResponse]
    The current trusts associated with the domain.
    update_time str
    Last update time. Synthetic field is populated automatically by CCFE.
    createTime String
    The time the instance was created. Synthetic field is populated automatically by CCFE. go/ccfe-synthetic-field-user-guide
    fqdn String
    Fully-qualified domain name of the exposed domain used by clients to connect to the service. Similar to what would be chosen for an Active Directory that is set up on an internal network.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Unique name of the domain in this scope including projects and location using the form: projects/{project_id}/locations/global/domains/{domain_name}.
    state String
    The current state of this domain.
    statusMessage String
    Additional information about the current status of this domain, if available.
    trusts List<Property Map>
    The current trusts associated with the domain.
    updateTime String
    Last update time. Synthetic field is populated automatically by CCFE.

    Supporting Types

    TrustResponse, TrustResponseArgs

    CreateTime string
    The time the instance was created.
    LastKnownTrustConnectedHeartbeatTime string
    The last heartbeat time when the trust was known to be connected.
    SelectiveAuthentication bool
    The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
    State string
    The current state of this trust.
    StateDescription string
    Additional information about the current state of this trust, if available.
    TargetDnsIpAddresses List<string>
    The target dns server ip addresses which can resolve the remote domain involved in trust.
    TargetDomainName string
    The fully qualified target domain name which will be in trust with current domain.
    TrustDirection string
    The trust direction decides the current domain is trusted, trusting or both.
    TrustHandshakeSecret string
    Input only, and will not be stored. The trust secret used for handshake with target domain.
    TrustType string
    The type of trust represented by the trust resource.
    UpdateTime string
    Last update time.
    CreateTime string
    The time the instance was created.
    LastKnownTrustConnectedHeartbeatTime string
    The last heartbeat time when the trust was known to be connected.
    SelectiveAuthentication bool
    The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
    State string
    The current state of this trust.
    StateDescription string
    Additional information about the current state of this trust, if available.
    TargetDnsIpAddresses []string
    The target dns server ip addresses which can resolve the remote domain involved in trust.
    TargetDomainName string
    The fully qualified target domain name which will be in trust with current domain.
    TrustDirection string
    The trust direction decides the current domain is trusted, trusting or both.
    TrustHandshakeSecret string
    Input only, and will not be stored. The trust secret used for handshake with target domain.
    TrustType string
    The type of trust represented by the trust resource.
    UpdateTime string
    Last update time.
    createTime String
    The time the instance was created.
    lastKnownTrustConnectedHeartbeatTime String
    The last heartbeat time when the trust was known to be connected.
    selectiveAuthentication Boolean
    The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
    state String
    The current state of this trust.
    stateDescription String
    Additional information about the current state of this trust, if available.
    targetDnsIpAddresses List<String>
    The target dns server ip addresses which can resolve the remote domain involved in trust.
    targetDomainName String
    The fully qualified target domain name which will be in trust with current domain.
    trustDirection String
    The trust direction decides the current domain is trusted, trusting or both.
    trustHandshakeSecret String
    Input only, and will not be stored. The trust secret used for handshake with target domain.
    trustType String
    The type of trust represented by the trust resource.
    updateTime String
    Last update time.
    createTime string
    The time the instance was created.
    lastKnownTrustConnectedHeartbeatTime string
    The last heartbeat time when the trust was known to be connected.
    selectiveAuthentication boolean
    The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
    state string
    The current state of this trust.
    stateDescription string
    Additional information about the current state of this trust, if available.
    targetDnsIpAddresses string[]
    The target dns server ip addresses which can resolve the remote domain involved in trust.
    targetDomainName string
    The fully qualified target domain name which will be in trust with current domain.
    trustDirection string
    The trust direction decides the current domain is trusted, trusting or both.
    trustHandshakeSecret string
    Input only, and will not be stored. The trust secret used for handshake with target domain.
    trustType string
    The type of trust represented by the trust resource.
    updateTime string
    Last update time.
    create_time str
    The time the instance was created.
    last_known_trust_connected_heartbeat_time str
    The last heartbeat time when the trust was known to be connected.
    selective_authentication bool
    The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
    state str
    The current state of this trust.
    state_description str
    Additional information about the current state of this trust, if available.
    target_dns_ip_addresses Sequence[str]
    The target dns server ip addresses which can resolve the remote domain involved in trust.
    target_domain_name str
    The fully qualified target domain name which will be in trust with current domain.
    trust_direction str
    The trust direction decides the current domain is trusted, trusting or both.
    trust_handshake_secret str
    Input only, and will not be stored. The trust secret used for handshake with target domain.
    trust_type str
    The type of trust represented by the trust resource.
    update_time str
    Last update time.
    createTime String
    The time the instance was created.
    lastKnownTrustConnectedHeartbeatTime String
    The last heartbeat time when the trust was known to be connected.
    selectiveAuthentication Boolean
    The trust authentication type which decides whether the trusted side has forest/domain wide access or selective access to approved set of resources.
    state String
    The current state of this trust.
    stateDescription String
    Additional information about the current state of this trust, if available.
    targetDnsIpAddresses List<String>
    The target dns server ip addresses which can resolve the remote domain involved in trust.
    targetDomainName String
    The fully qualified target domain name which will be in trust with current domain.
    trustDirection String
    The trust direction decides the current domain is trusted, trusting or both.
    trustHandshakeSecret String
    Input only, and will not be stored. The trust secret used for handshake with target domain.
    trustType String
    The type of trust represented by the trust resource.
    updateTime String
    Last update time.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
    pulumi/pulumi-google-native